*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {474, 2, 1, 8348c86c}
Probably caused by : ntkrpamp.exe ( nt!KiAttachProcess+58 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000474, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 8348c86c, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 83583718
Unable to read MiSystemVaType memory at 83563160
00000474
CURRENT_IRQL: 2
FAULTING_IP:
nt!KiAttachProcess+58
8348c86c f00fc102 lock xadd dword ptr [edx],eax
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: System
TRAP_FRAME: ae823b8c -- (.trap 0xffffffffae823b8c)
ErrCode = 00000002
eax=00000008 ebx=00000400 ecx=ac8796b0 edx=00000474 esi=ac879540 edi=ac879580
eip=8348c86c esp=ae823c00 ebp=ae823c0c iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!KiAttachProcess+0x58:
8348c86c f00fc102 lock xadd dword ptr [edx],eax ds:0023:00000474=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 8348c86c to 8346181b
STACK_TEXT:
ae823b8c 8348c86c badb0d00 00000474 ae823c08 nt!KiTrap0E+0x2cf
ae823c0c 834af7de 00000400 00000000 ac8796b0 nt!KiAttachProcess+0x58
ae823c50 8345c87d badb0d00 ae823cc8 ae003c98 nt!KeStackAttachProcess+0xbe
ae823c60 834a5320 00000001 ac879540 835555bc nt!ZwOpenProcess+0x11
ae823d00 8348903b 80002a68 00000000 ac879540 nt!KiCheckForThreadDispatch+0x151
ae823d50 836299df 80000001 b3a01302 00000000 nt!ExpWorkerThread+0x10d
ae823d90 834db1d9 83488f2e 80000001 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiAttachProcess+58
8348c86c f00fc102 lock xadd dword ptr [edx],eax
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!KiAttachProcess+58
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4cc78ed4
FAILURE_BUCKET_ID: 0xA_nt!KiAttachProcess+58
BUCKET_ID: 0xA_nt!KiAttachProcess+58
Followup: MachineOwner